It has no README or tests, and the repository has no security policy. The three-file package is focused and MIT-licensed, but the five-year gap since its only release leaves compatibility and abandonment concerns.
40%
Total Score
100
64
83
This package has only one release, published about four years and ten months ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a dependency.
The artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the missing README reduces transparency for a small integration library.
The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy package, but these counters provide no supporting evidence of community adoption or review.
Composer is used for the build, which is appropriate, but no security scanning tools are present. This is a meaningful repository hygiene gap, though it is not evidence of a malicious package.
The linked repository has no security policy. For a package handling Apple Sign In integration, this weakens disclosure and maintenance transparency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
socialiteproviders/manager Version ~2.0 || ~3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.